Privacy
What we collect, why, for how long, and how you get it deleted. Updated 14 September 2026.
Who is responsible
Spark is run by Neðri Hóll Hugmyndahús ehf., reg. no. 470126-2480, Álfhólsvegur 97, 200 Kópavogur, Iceland. The company is the controller of the processing described here. Questions about it go to hallo@sparkwithai.app.
What we collect
Email, name and company name. When you use a course we record which videos you have watched, how far, and the answers you submit in exercises. We do not collect location, contacts or anything from your other systems.
Why
The email to sign you in, because we do not use passwords. Progress so you resume where you stopped. Answers so we can give you feedback.
Enquiries and invoices
If a company enquires about a course, we record its name and, where given, the name, role and email address of the person who got in touch, with a short note about the conversation, so we can reply and follow up. Someone who asks for a course on a sale page leaves a name and email address for the same purpose. We delete it if you ask. Invoices carry the payer's name, a description and the amount. They are part of the company's bookkeeping records, which Icelandic bookkeeping law requires to be kept for seven years.
What the owner sees
Whoever manages your company’s access sees your name and email, whether you have accepted the invitation, how much of each part you have watched, and how many exercises are passed. They do not see the text you submitted. That is a decision we do not intend to change.
What we pass on
Exercise answers go to the model that reviews them, one language model run by a service provider. They are not used to train it. Your email, name and company name go to the mail service that sends invitations and sign-in links, and mail you send us goes the same way. Progress and answers are stored with Google Cloud inside the European Union, the site runs on Vercel in Frankfurt, and videos are delivered by Bunny. The sign-in service and the language model are Google’s and are not bound to Europe, so some data can leave the European Economic Area.
For how long
While a company or an individual has access, and for twelve months after, so the thread can be picked up if access is renewed. Then everything is deleted: answers, progress and each person's account. Requests for access and invoices are kept to show what was agreed, invoices for seven years under bookkeeping law. Database backups are kept for fourteen weeks, so the data leaves those within that time too.
Your rights
You can ask for a copy of everything we hold about you, have what is wrong corrected, or have it deleted. Write to hallo@sparkwithai.app and we answer within thirty days. You can also complain to the Icelandic Data Protection Authority.
Cookies
One cookie keeps you signed in. If you choose a language or theme on your profile, two cookies keep that choice for a year. The public site sets no cookies; its theme choice is kept in your browser itself. No third-party cookies and no advertising tracking.